I have a user that logs into the domain receiving an error message regarding their "my documents" folder being inaccessible. Browsing the D:\Users directory using Windows Explorer on the server, the user's folder does not show up in the list (showing hidden and system files is enabled). However, using a command prompt, the users folder DOES show up in a DIR command list. I can also type the path (D:\Users\username) in the address bar in Windows Explorer and see the contents of the folder. But when I click to go up one level in the folder tree structure, it correctly goes up to the D:\Users directory but the folder isn't listed. Any thoughts?
HighTechGeek's questions
PROBLEM:
My System (C:) and Data (D:) partitions are full and I need to expand them or move them to larger drives.
SPECS:
- Dell PowerEdge 2900 server
- Adaptec 39320A SCSI adapters
- Dell Perc 5/i RAID controller
- 3 Maxtor 10K RPM 73GB serial attached SCSI (SAS) drives in RAID 5
This configuration presents a single ~145GB disk to Windows Server 2003 R2
It has 2 partitions: C: & D:
- C is 12GB and holds the system - it is full
- D is ~133GB and would be full if the data were not compressed
SOLUTION IDEAS:
Here are some options I was considering:
- Buy a large SATA drive and move the D partition to it. Then, expand
the C partition to fill the 145GB RAID 5 SAS.
- I think this is my preferred solution, but I'd like some advice on what tools are best:
- I'm concerned about resizing a System partition.
- Windows diskpart.exe (part of Server 2003) specifically supports data partition resizing only, not system partitions.
- Many partition tools are for desktop use only, not server use
- Do you know of any Dell utilities that can do this - I've booted into the Perc 5/i controller settings and perhaps there's a way to do it here. Can anyone confirm?
- Buy one or more large SAS drives and insert them into the 5 remaining empty slots on the server. Create a new array and move the C & D to this new array.
- Again, I'm not sure what the best tools are to accomplish this.
- I'm also checking with Dell, but would appreciate advice from others that have done this before.
- Boot to a live CD (Linux based Parted Magic?) and load it with drivers for the Adaptec and Perc 5/i controllers - if this is possible (might have to use Windows based Live CD?). Use standard tools to move the now offline C and D partitions to larger drives.
- Use NTBackup to backup the system and system state. Re-install the Windows Server 2003 R2 from scratch onto new larger drives and restore.
- I'm really looking for suggestions for a way to expand these partitions without having to re-install the Server.
- I'm trying to avoid rebuilding from scratch.
Any other caveats I should know about?
They are having trouble with mail delivery (some get through, others don't).
What do you suggest I do to check the server configuration?
Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7004
Date: 1/18/2011
Time: 7:33:29 AM
User: N/A
Computer: SERVER
Description:
This is an SMTP protocol error log for virtual server ID 1, connection #621. The remote host "212.52.84.180", responded to the SMTP command "rcpt" with "550 #5.1.0 Address rejected [email protected] ". The full command sent was "RCPT TO: ". This will probably cause the connection to fail.
Event Type: Error
Event Source: MSExchangeTransport
Event Category: NDR
Event ID: 3018
Date: 1/18/2011
Time: 9:49:37 AM
User: N/A
Computer: SERVER
Description:
A non-delivery report with a status code of 5.4.0 was generated for recipient rfc822;[email protected] (Message-ID ).
Causes: This message indicates a DNS problem or an IP address configuration problem
Solution: Check the DNS using nslookup or dnsq. Verify the IP address is in IPv4 literal format.
Data:
0000: ef 02 04 c0 ï..À
Windows Server 2003 Small Business Server SP2
Exchange Version 6.5 (Build 7638.2: Service Pack 2)
This network has been neglected and has been having email problems for years and was on many blacklists. I was called in after the server eventually crashed... I got the server back up and running, but email problems persist.
Outgoing mail delivery is sporadic. Sometimes the mail goes through, sometimes a delayed delivery report is generated after a day or more, and sometimes it seems to go through, but the recipient never receives it.
Not sure if spammers are successfully using the server as a relay (see event entries below after turning on maximum SMTP logging)...
- User PCs infected with viruses and server was blacklisted on many sites (I used mxtoolbox.com)
- I have cleaned all the PCs and changed all passwords (including administrator)
- I have requested removal from all of the blacklists - most have removed the listing, some take more time.
I have setup rDNS pointer records with the ISP (Comcast) - that was one reason for some of the blacklistings.
I have tested that it's not an open relay using telnet as described here:
www.amset.info/exchange/smtp-openrelay.aspI followed the advise of a Spamhaus & Microsoft article to enable maximum SMTP logging. http://www.spamhaus.org/faq/answers.lasso?section=isp%20spam%20issues#320
which directed me to Microsoft KB article 895853, specifically, the part 2/3 down titled:
"If mail relay occurs from an account on an Exchange computer that is not configured as an open relay" .
The Application Event Log is filling with this type of activity (Event ID 7002, 7002 & 3018 errors):
Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7004
Date: 1/18/2011
Time: 7:33:29 AM
User: N/A
Computer: SERVER
Description:
This is an SMTP protocol error log for virtual server ID 1, connection #621. The remote host "212.52.84.180", responded to the SMTP command "rcpt" with "550 #5.1.0 Address rejected [email protected] ". The full command sent was "RCPT TO: ". This will probably cause the connection to fail.
and this:
Event Type: Warning
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7002
Date: 1/18/2011
Time: 7:33:29 AM
User: N/A
Computer: SERVER
Description:
This is an SMTP protocol warning log for virtual server ID 1, connection #620. The remote host "212.52.84.170", responded to the SMTP command "rcpt" with "452 Too many recipients received this hour ". The full command sent was "RCPT TO: ". This may cause the connection to fail.
or a variant of:
Event Type: Warning
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7002
Date: 1/18/2011
Time: 8:39:21 AM
User: N/A
Computer: SERVER
Description:
This is an SMTP protocol warning log for virtual server ID 1, connection #661. The remote host "82.57.200.133", responded to the SMTP command "rcpt" with "421 Service not available - too busy ". The full command sent was "RCPT TO: ". This may cause the connection to fail.
also
Event Type: Error
Event Source: MSExchangeTransport
Event Category: NDR
Event ID: 3018
Date: 1/18/2011
Time: 9:49:37 AM
User: N/A
Computer: SERVER
Description:
A non-delivery report with a status code of 5.4.0 was generated for recipient rfc822;[email protected] (Message-ID ).
Causes: This message indicates a DNS problem or an IP address configuration problem
Solution: Check the DNS using nslookup or dnsq. Verify the IP address is in IPv4 literal format.
Data:
0000: ef 02 04 c0 ï..À
Any guidance and/or suggestions and/or tests to perform would be greatly appreciated.
Last week, I setup a new domain and Exchange Server 2007 SP1. I created new accounts and mailboxes for my 30 users and imported all mail from their old domain to this new server. It's a Hub Transport on a Windows 2003 Server R2 SP2. I don't have an Edge Transport Server. I setup the server as servername.mydomain.local and then added mydomain.com as the default accepted domain.
Internal email and most external mail is flowing just fine.
However, my users are getting "Delivery Delayed" messages when sending to a couple external addresses. In the Exchange Management Console "Queue Viewer", 2 recipient domains are rejecting email with similar notices:
451-4.4.0 Primary target IP address responded with: "554-p3pismtp01-027.prod.phx3.secureserver.net##451 4.4.0.554 Your access to this mail system has been rejected due to spam or virus content. If you believe that this failure is in error, please submit an u...
I believe they accepted mail in the past from the old Exchange server.
This morning, I added an SPF record with our domain registrar for the new server (there was none before for the old server). It doesn't seem to have helped.
I think the rejections might be related to a needed certificate on my server? I am getting an error 12014 in my Event Log.
Event Type: Error
Event Source: MSExchangeTransport
Event Category: TransportService
Event ID: 12014
Date: 10/28/2010
Time: 12:27:05 PM
User: N/A
Computer: SERVERNAME
Description:
Microsoft Exchange couldn't find a certificate that contains the domain name mail.mydomain.com in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector SMTP Send Connector with a FQDN parameter of mail.mydomain.com. If the connector's FQDN is not specified, the computer's FQDN is used. Verify the connector configuration and the installed certificates to make sure that there is a certificate with a domain name for that FQDN. If this certificate exists, run Enable-ExchangeCertificate -Services SMTP to make sure that the Microsoft Exchange Transport service has access to the certificate key.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Is this the same as the self-signed SSL Certificate? In the Exchange Shell, Get-ExchangeCertificate yields a thumbprint with Services listed as IP.WS and the Subject as CN=servername. I am thinking that I need to create a certificate for one or more of the following?
1. mail.mydomain.com (the FQDN used in my MX record)
2. servername.mydomain.com
3. servername.mydomain.local
and then use the Enable-ExchangeCertificate cmdlet as directed in the Event log error?
I need help figuring out which certificate to create and how to do that if it's not the same as the SSL certificate...
Also, I'm not sure if this might be related: I set my SMTP send connector to specify mail.mydomain.com as the FQDN response to HELO or EHLO. However, per the system Help recommendation, I left my Receive Connectors (Client and Default) as servername.mydomain.local (regarding HELO response).
Any help and guidance would be greatly appreciated! Thanks! -Dan
UPDATE It turns out this was a false alarm on the part of an end user, but there are some helpful posts and suggestions if this actually occurred. UPDATE
Original Post Follows
I have a user that accesses their Exchange mailbox using OWA exclusively.
They claim that their Contacts have mysteriously been deleted. They say they had 50-60 Contacts.
When I go into their account, there are only 2 Contacts - they say they just added those.
No Contacts are showing up in the Deleted Items folder, nor in any other folder listed in OWA. There are no subfolders within the Contacts folder.
In OWA "Options"/"Deleted Items", there are no Contacts in the "Recover Deleted Items" list - only old emails and a few Calendar items.
If I create a new message and start typing a name in the "To:" box, several Contacts appear in a drop down list. I can also start typing names in the search box at the top of the OWA window and names appear. I don't know where these names are coming from. They are not in the Default Global Address List.
I also wonder if there's a way to check if Contacts have been deleted. The user thinks it started last Friday.
Thanks for any help, Dan